ISACA LA - Beyond spreadsheets: Practical GRC

So many of our compliance programs are unnecessarily complicated, laden with spreadsheets that are many thousands of rows but not reflective of our actual operations. Despite our genuine desire to be compliant, our efforts are overshadowed with irrelevant busywork and the myriad of tools sold to us as silver bullets. Meanwhile the breaches, ransomware, and losses continue to mount.